CVE-2024-39934: Robocorp Rcc Shared Holotree Enabled
Enabling the shared holotree feature in Robocorp RCC (via `holotree shared --enable`) configures Python environments with overly permissive access rights. This enables unprivileged local users to edit the environment files, potentially leading to local privilege escalation if the environment is later accessed or executed by a higher-privileged user or system
Rustgreprules fetch cve-2024-39934-robocorp-rcc-shared-holotree-enabled --engine opengrepDescription
Enabling the shared holotree feature in Robocorp RCC (via `holotree shared --enable`) configures Python environments with overly permissive access rights. This enables unprivileged local users to edit the environment files, potentially leading to local privilege escalation if the environment is later accessed or executed by a higher-privileged user or system
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.